.gitignore

@@ -1,8 +1,3 @@
 _build
 data/secmod/*
 !data/secmod/.gitkeep
-
-
-# default output files of offline-tool
-response.json
-request.json

data/auditor_private_key

@@ -0,0 +1 @@
+Iî÷q
¸àwÇ´Y—›gbÙ'R+5µ™â°ƒˆyë>

data/auditor_public_key

@@ -0,0 +1 @@
+A17JXR3E6J4CXDPYT7S1H25PGJ3ABS26TQ38654QCX0TB59RPMF0====

src/crypto.ml

@@ -28,9 +28,8 @@ module EddsaPublicKey = struct
     let* pub = of_octets octets in
     Ok pub
 
-  let jsont =
+  let to_b32 t = B32.encode (to_octets t)
-    let to_b32 t = B32.encode (to_octets t) in
+  let jsont = Jsont.of_of_string ~kind:"EddsaPublicKey" of_b32 ~enc:to_b32
-    Jsont.of_of_string ~kind:"EddsaPublicKey" of_b32 ~enc:to_b32
 
   let caqti =
     Caqti_type.custom

tools/do_management.sh

@@ -5,13 +5,21 @@ set -e
 file1="tmp_file1.json"
 file2="tmp_file2.json"
 file3="tmp_file3.json"
+file4="tmp_file4.json"
+
+auditor_pub=$(<"/data/auditor_public_key")
 
 dune exec offline -- download --output $file1
 dune exec offline -- sign --input $file1 --output $file2
 dune exec offline -- upload --input $file2 --url "/management/keys"
-dune exec offline -- global-fees --output $file3 --start_date "0.0" --end_date "99999999.9" --history_fee "EUR:0.0" --account_fee "EUR:0.0" --purse_fee "EUR:0.0" --history_expiration "9999999.0" --purse_account_limit 1 --purse_timeout "9999999.0"
+
-dune exec offline -- upload --input $file3 --url "/management/global-fees"
+dune exec offline -- enable-auditor --output $file3 --auditor_url "auditor.example.com" --auditor_name "auditor example" --auditor_pub $auditor_pub --validity_start "0.0"
+dune exec offline -- upload --input $file3 --url "/management/auditors"
+
+dune exec offline -- global-fees --output $file4 --start_date "0.0" --end_date "99999999.9" --history_fee "EUR:0.0" --account_fee "EUR:0.0" --purse_fee "EUR:0.0" --history_expiration "9999999.0" --purse_account_limit 1 --purse_timeout "9999999.0"
+dune exec offline -- upload --input $file4 --url "/management/global-fees"
 
 rm $file1
 rm $file2
 rm $file3
+rm $file4

tools/offline.ml

@@ -16,6 +16,14 @@ module Arg = struct
   let amount =
     Arg.Conv.make ~docv:"amount argument" ~parser:Amount.of_string ~pp:Amount.pp
       ()
+
+  let eddsa_pub =
+    let parser s = Crypto.EddsaPublicKey.of_b32 s in
+    let pp fmt key =
+      let s = Crypto.EddsaPublicKey.to_b32 key in
+      Fmt.pf fmt "%s" s
+    in
+    Arg.Conv.make ~docv:"eddsa public key argument" ~parser ~pp ()
 end
 
 let default_master_offline_key_file = "data/master_offline_private_key"
@@ -96,13 +104,38 @@ let revoke_signkey_cmd =
   let doc = "Revoke signkey." in
   let signkey =
     let doc = "public signing key" in
-    Arg.(required & pos 0 (some string) None & info [] ~doc)
+    Arg.(required & pos 0 (some eddsa_pub) None & info [] ~doc)
   in
   Cmd.make (Cmd.info "revoke-signkey" ~doc)
   @@
   let+ output = output and+ master_key = master_key and+ signkey = signkey in
   revoke_signkey ~output ~master_key ~signkey
 
+let enable_auditor_cmd =
+  let doc = "Enable auditor." in
+  let auditor_url =
+    Arg.(required & opt (some string) None & info [ "auditor_url" ])
+  in
+  let auditor_name =
+    Arg.(required & opt (some string) None & info [ "auditor_name" ])
+  in
+  let auditor_pub =
+    Arg.(required & opt (some eddsa_pub) None & info [ "auditor_pub" ])
+  in
+  let validity_start =
+    Arg.(required & opt (some timestamp) None & info [ "validity_start" ])
+  in
+  Cmd.make (Cmd.info "enable-auditor" ~doc)
+  @@
+  let+ output = output
+  and+ master_key = master_key
+  and+ auditor_url = auditor_url
+  and+ auditor_name = auditor_name
+  and+ auditor_pub = auditor_pub
+  and+ validity_start = validity_start in
+  enable_auditor ~output ~master_key ~auditor_url ~auditor_name ~auditor_pub
+    ~validity_start
+
 let global_fees_cmd =
   let doc = "Provides global fee configuration." in
   let start_date =
@@ -159,6 +192,7 @@ let cli =
       upload_cmd;
       revoke_denom_cmd;
       revoke_signkey_cmd;
+      enable_auditor_cmd;
       global_fees_cmd;
     ]
 

tools/offline_impl.ml

@@ -74,11 +74,10 @@ let revoke_denom ~output ~master_key ~h_denom =
 
 let revoke_signkey ~output ~master_key ~signkey =
   let* key = read_master_key_file master_key in
-  let* exchange_pub = Crypto.EddsaPublicKey.of_b32 signkey in
   let signkey_revoke =
     let master_sig =
       let open Bin_sig.MasterSigningKeyRevocation in
-      sign_f ~f:(Crypto.EddsaSignature.sign ~key) { exchange_pub }
+      sign_f ~f:(Crypto.EddsaSignature.sign ~key) { exchange_pub= signkey }
     in
     Api.SignkeyRevocationSignature.{ master_sig }
   in
@@ -135,3 +134,24 @@ let global_fees ~output ~master_key ~start_date ~end_date ~history_fee
   let* s = Api.encode Api.GlobalFees.jsont global_fees in
   let* () = write_file output s in
   Ok ()
+
+let enable_auditor ~output ~master_key ~auditor_url ~auditor_name ~auditor_pub
+    ~validity_start =
+  let open Crypto in
+  let* key = read_master_key_file master_key in
+  let master_sig =
+    let open Bin_sig.MasterAddAuditor in
+    sign_f ~f:(EddsaSignature.sign ~key)
+      {
+        start_date= validity_start;
+        auditor_pub;
+        h_auditor_url= Bin_type.Hash_64_cstr.hash auditor_url;
+      }
+  in
+  let v =
+    Api.AuditorSetupMessage.
+      { auditor_url; auditor_name; auditor_pub; master_sig; validity_start }
+  in
+  let* s = Api.encode Api.AuditorSetupMessage.jsont v in
+  let* () = write_file output s in
+  Ok ()